Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Web Protection Policies > Enforcement order
Enforcement order
Administrator Help | TRITON AP-WEB and Web Filter & Security | Version 8.0.x
Multiple criteria, applied in a specific order, are used to determine whether to permit, block, or limit requested Internet data.
For each request, Websense components:
1.
Verify subscription compliance, making sure that the subscription is current.
2.
Determine which exception or policy applies, searching in this order:
*
On-premises software (Websense Filtering Service):
*
Policy or exceptions assigned to the user
*
Policy or exceptions assigned to the IP address (computer or network) of the machine being used
*
Policies or exceptions assigned to groups the user belongs to
*
Policies or exceptions assigned to the user's domain (OU)
*
The Default policy
 
* 
Note 
You can configure Filtering Service to prioritize group and domain-based policies over IP address-based policies, if needed. See Prioritizing group and domain policies.
*
For users whose requests are managed by the hybrid service:
*
Policy or exceptions assigned to the user
*
Policy or exceptions assigned to groups the user belongs to
*
Policy or exceptions assigned to the user's domain (OU)
*
Policy or exceptions assigned to the external IP address (filtered location) from which the request originates
*
The Default policy
The first applicable exception or policy found is used.
3.
Filter the request according to the exception or policy's restrictions.
In some cases, a user belongs to more than one group or domain, and no higher-priority policy applies. In these cases, Websense components check the policies assigned to each of the user's groups.
*
If all the groups have the same policy, Websense software enforces that policy.
*
If one of the groups has a different policy, Websense software uses the Use more restrictive blocking selection on the Settings > General > Filtering page to determine which policy to enforce.
*
If Use more restrictive blocking is checked, and any of the applicable policies blocks access to the requested category, the site is blocked.
*
If the option is not checked, and any of the applicable policies permits access to the requested category, the site is permitted.
If one of the applicable policies enforces a limited access filter, the Use more restrictive blocking option can have different effects than expected. See Limited access filters and enforcement order.
*
If one of the groups has a different policy, and any of the potentially applicable policies enforces file type blocking, the file type blocking settings are ignored.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Web Protection Policies > Enforcement order
Copyright 2016 Forcepoint LLC. All rights reserved.